coreml
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill describes how to compile and load machine learning models at runtime from computed paths using
MLModel.compileModel(at:)andMLModel(contentsOf:). This capability allows for the execution of logic not contained in the original application bundle. - [REMOTE_CODE_EXECUTION]: The documentation outlines a workflow for downloading model files from remote URLs, followed by on-device compilation and execution.
- Evidence:
SKILL.mdandreferences/profiling-and-personalization.mddescribe fetching a model from adownloadedModelURL, compiling it, and then loading the result. - [EXTERNAL_DOWNLOADS]: The skill contains instructions for fetching machine learning models from remote network locations at runtime.
- [COMMAND_EXECUTION]: The skill describes performing file system operations, such as moving compiled model directories and persisting fine-tuned models to the application support directory using
FileManagerandMLWritable.write(to:). - [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces for processing untrusted external data, such as images and labels, which could potentially influence application behavior if the model is susceptible to malicious inputs.
- Ingestion points:
VNCoreMLRequestinputs andMLUpdateTasktraining data. - Boundary markers: None specified.
- Capability inventory: File system access and runtime model compilation.
- Sanitization: The skill recommends performing integrity checks (signature/hash validation) for downloaded models before compilation.
Audit Metadata